Availability and Resilience. Data on Xxxxxxxxxx.Xxx server systems is backed up incrementally at least daily and "fully" weekly. The backup media are encrypted and moved to a physically separate location. The import of backups is tested regularly. The IT systems have an uninterruptible power supply. The server room has a fire alarm system and a CO2 extinguishing system. All server systems are subject to monitoring, which immediately triggers messages to an administrator in the event of malfunctions. There is a contingency plan in place at Xxxxxxxxxx.Xxx, which includes a restart plan.
Availability and Resilience. 1. Availability control
Availability and Resilience. Capacity to be restored
Availability and Resilience. It must be ensured that personal data is protected against accidental destruction or loss. ● Controller data is subject to regular data backups ● Use of redundant systems ● Use of uninterruptible power supply.
Availability and Resilience. The processing of personal data must occur on data processing systems that undergo regular, documented patch management. No systems may be connected in the network that are outside the maintenance cycles of the manufacturers (esp. no Windows XP, Windows Server 2003, etc.). Security- related patches must be installed within 72 hours after being announced. The continuous availability of personal data must be ensured by means of redundant storage media and data backups in accordance with the state of the art. Data centers and server rooms must correspond to the state of the art (temperature regulation, protection against fire, water penetration, etc.). The servers must have an uninterruptible power supply (UPS) that ensures a controlled shutdown without data loss. The company has implemented the requirements in the following manner: Regular documented patch management for the server Installation of security-critical patches within 72 hours Data storage on storage systems Spatially separated redundant data storage Uninterruptable power source Redundant air conditioning of the servers Early fire detection
Availability and Resilience. Availability Control SoftwareONE shall ensure that personal data is protected against destruction or loss. Technical Measures • Fire and smoke detection systems • Fire extinguisher server room • Server room monitoring temperature and humidity, server room airconditioned • Uninterrupted power supply (UPS) • Centralized managed malware protection solutions are in place within our environments. Related information systems are protected by traffic control. This implies the usage of firewall technologies and network segmentation. A Client Management Suite is installed on all devices and can only be disabled/modified by administrators Organizational Measures • Backup & Recovery Concept: SoftwareONE has a documented backup concept. The backup recovery functionality is tested regularly. At the request of the Controller, SoftwareONE can provide the backup concept. • Checking the backup process • Regular data recovery tests and logging of the result • Regular data backup, checked for recoverability • Existence of a contingency plan: SoftwareONE has multiple business contingency and risk management scenarios in place • When updates for systems or applications are announced, they are evaluated as quickly as possible and installed after release. The installation of security updates is prioritized. Security related updates are installed promptly and must be implemented within six weeks of release. This maximum period is intended to ensure that there is enough testing time even for critical systems • The storage systems meet the traditional demands of resilience and reliability
Availability and Resilience. 6.1 The Booking Service must be sufficiently robust and resilient to meet the required hours of operation, with no single points of failure and designed to minimise data loss in line with Schedule 21.
6.2 It must be possible to restore the Booking Service to a known point (for example in the event of a failure or for other business reason). In support of this the Supplier must provide a backup and storage approach that will ensure that data loss is minimised and that data can be restored within a reasonable period, to be approved by the Authority.
6.3 Backups must be verified to ensure that they are capable of being restored and the restore procedures should be successfully tested on a regular basis but at least annually.
6.4 Backup data must be transported and stored securely in line with Authority Information Assurance Guidelines.
Availability and Resilience. Data on doo's server systems are regularly backed up comprehensively according to a detailed backup policy. The import of backups is tested regularly. The IT systems have an uninterruptible power supply. The server room is equipped with a fire alarm system and a CO2 extinguishing system. All server systems are subject to monitoring, which immediately triggers messages to an administrator in case of malfunctions. There is also an emergency plan at doo, which includes a restart plan. In addition, the measures implemented with regard to the servers at the technical service provider AWS are documented in detail here: xxxxx://xxx.xxxxxx.xxx/de/security/
Availability and Resilience. Data on the Contractor’s server systems is backed up incrementally at least daily and "fully" weekly. The backup media are encrypted. The import of backups is tested regularly. The IT systems have an uninterruptible power supply. A fire alarm system and a CO2 extinguishing system are located in the server room. All server systems are subject to monitoring, which immediately triggers reports to an administrator in case of malfunctions. The Contrator implemented and maintains a detailed emergency plan, which also includes a business continuity and restart plan.
Availability and Resilience. To ensure availability, protection programs (virus scanners, firewalls, encryption programs, SPAM filters) are used and a written concept of their use (virus protection concept, etc.) has been created.. • In addition, contractual restrictions apply to employees of subcontractors and other service providers who are involved in the performance of the contract concerning the handling of Customer’s personal data. • Availability levels are specified in Netigates Terms of Service. • If the Customer’s account is hosted on xxx.xxxx.xxxxx.xxxx.xx, the processing takes place exclusively in the Federal Republic of Germany (see Sub-processors, Section 7). Access for Netigate AB from Sweden is possible as part of the development and maintenance of the applications and systems.
